Untitled

<html>
<head>
<title>Swift-Tournaments. Your tournament site</title>
</head>
<?php
// database connection en smtp server zetten om te mailen

include('connection.php');
ini_set("SMTP", "SMTP.quicknet.nl");

// gebruiken tegen spambots

$a = rand(0,10);
$b = rand(0,10);
$sum = $a + $b;

// als er op de knop gedrukt wordt, kijken of alles klopt

if(isset($_POST["register"])){
    if (empty($_POST["username"]) ||
    empty($_POST["email"])){
        echo "pleas fill out the entire form";
    }else if($_POST["email"] != $_POST["emailconf"]){
        echo "email does not match";
    }else if($_POST["calc"] != $_POST["sum"]){
        echo "you are obviously not old enough. You are now banned from our website";
        echo $_POST["sum"];
    }else if(!isset($_POST["checkbox"])){
        echo "you have to accept the agreement";
    }else{

    // random password genereren

    $characters = "0123456789abcdefghijklmnopqrstuvwxyz";
    $string = "S";
    for ($p = 0; $p < 6; $p++) {
        $string .= $characters[mt_rand(0, strlen($characters)-1)];
    }

        $username = $_POST["username"];
        $password = md5($string);  // password encrytped aan db meegeven
        $email = $_POST["email"];

        // kijken of de user en email niet al bestaan

        $result = mysql_query("SELECT * FROM users WHERE username='$username'");
        $numusers = mysql_num_rows($result);
        $result = mysql_query("SELECT * FROM users WHERE email='$email'");
        $numemails = mysql_num_rows($result);

        if($numusers == 0 && $numemails == 0){

        // invoegen in de databse die zooi

        mysql_query("INSERT INTO users (username, password, email, acceslevel)
        VALUES('$username', '$password', '$email', '0')");

        // mailtje met daarin een wonderbaarlijk werkende message xD

        $subject = "swift tournaments registration";
        $message = <<<EOD

Hello $username

Thank you for registering on swift-tournaments.com.

Your password is $string.

If you did not register for our website please consider this message not send.

Oscar Kuster
Swift-Tournament manger

EOD;

        $headers = "From: noreply@swift-tournaments.com";

        mail($email,$subject,$message,$headers); // mail versturen

        header('location: registered.php'); // naar registered om in te loggen en leuke confirmatieboodschap.

        }else{
        echo "username already exists";
        }
    }
}
?>
<!-- registratie forumlier -->

<form  method="post">
username <input type="text" name="username"/><br />
email <input type="text" name="email" /><br />
confirm email <input type="text" name="emailconf" /><br />
 <?php echo $a. " + " .$b. " ="; ?> <input type="text" name="calc" /><br />
I have read the agreements and agree <input type="checkbox" name="checkbox" /><br />
<input type="submit" name="register" value="register">
<input type="hidden" name="sum" value="<?php echo $sum ?>"/>
</form>